<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-30T16:16:08.779247+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/33203971-2be3-4377-9703-26e2b9a39e09/export</id>
    <title>33203971-2be3-4377-9703-26e2b9a39e09</title>
    <updated>2026-09-30T16:16:08.808230+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "33203971-2be3-4377-9703-26e2b9a39e09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102794", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mwqkpzvuxb2w", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-102794: A vulnerability has been found in Ziroom ZHOME A0101 1.0.1.0\nCVSS 9.1 \u00b7 EPSS 2.4%\nhttps://beta.vulnsea.com/cve/CVE-2026-102794\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-30T14:32:43.187655Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/33203971-2be3-4377-9703-26e2b9a39e09/export"/>
    <published>2026-09-30T14:32:43.187655+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/05232ee8-caab-49e9-a6de-430243b87cd2/export</id>
    <title>05232ee8-caab-49e9-a6de-430243b87cd2</title>
    <updated>2026-09-30T16:16:08.810056+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "05232ee8-caab-49e9-a6de-430243b87cd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-102794", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwpe26zkws2q", "content": "Ziroom ZHOME A0101 1.0.1.0 has a CRITICAL command injection vuln (CVE-2026-102794). No fix yet \u2014 exploit details public. Limit endpoint access &amp;amp; monitor systems. https://radar.offseq.com/threat/a-vulnerability-has-been-found-in-ziroom-zhome-a0101-1010-cve-2026-102794-9a56d1624759c7e9 #OffSeq #Vul...", "creation_timestamp": "2026-09-30T03:00:28.812891Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/05232ee8-caab-49e9-a6de-430243b87cd2/export"/>
    <published>2026-09-30T03:00:28.812891+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/5a2a77df-e394-4f6d-bc28-b86846fa4d0a/export</id>
    <title>5a2a77df-e394-4f6d-bc28-b86846fa4d0a</title>
    <updated>2026-09-30T16:16:08.810188+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "5a2a77df-e394-4f6d-bc28-b86846fa4d0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-102794", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117357754824850920", "content": "CVE-2026-102794: Ziroom ZHOME A0101 v1.0.1.0 is affected by a CRITICAL command injection flaw (CVSS 9.1) in /api/ZRnetwork/ping. No patch, public exploit out. Restrict access &amp;amp; monitor usage. https://radar.offseq.com/threat/a-vulnerability-has-been-found-in-ziroom-zhome-a0101-1010-cve-2026-102794-9a56d1624759c7e9 #OffSeq #Vulnerability #InfoSec", "creation_timestamp": "2026-09-30T03:00:26.510849Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/5a2a77df-e394-4f6d-bc28-b86846fa4d0a/export"/>
    <published>2026-09-30T03:00:26.510849+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/de8f8db7-7b6a-49bf-a47c-42059a750c63/export</id>
    <title>de8f8db7-7b6a-49bf-a47c-42059a750c63</title>
    <updated>2026-09-30T16:16:08.810297+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "de8f8db7-7b6a-49bf-a47c-42059a750c63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-102794", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwozyo6he52m", "content": "Ziroom ZHOME A0101 v1.0.1.0 hit by CRITICAL command injection (CVE-2026-102794). Exploit is public, vendor silent. Assess your exposure and segment devices if possible. https://radar.offseq.com/threat/cve-2026-102794-command-injection-in-ziroom-zhome-a0101-70f3389000d03735 #OffSeq #IoTSecurity #C...", "creation_timestamp": "2026-09-30T00:00:39.962600Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/de8f8db7-7b6a-49bf-a47c-42059a750c63/export"/>
    <published>2026-09-30T00:00:39.962600+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/64376a39-35c2-4605-9a19-3f9751f2c098/export</id>
    <title>64376a39-35c2-4605-9a19-3f9751f2c098</title>
    <updated>2026-09-30T16:16:08.810402+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "64376a39-35c2-4605-9a19-3f9751f2c098", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-102794", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117357047775184830", "content": "CVE-2026-102794: Ziroom ZHOME A0101 v1.0.1.0 has a CRITICAL command injection vuln in /api/ZRnetwork/ping (url param). Public exploit available, vendor silent. Remediate ASAP if deployed. https://radar.offseq.com/threat/cve-2026-102794-command-injection-in-ziroom-zhome-a0101-70f3389000d03735 #OffSeq #CVE2026102794 #Infosec #IoT", "creation_timestamp": "2026-09-30T00:00:37.674762Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/64376a39-35c2-4605-9a19-3f9751f2c098/export"/>
    <published>2026-09-30T00:00:37.674762+00:00</published>
  </entry>
</feed>
